Skip to content
The Point of Failure

Episode 05 · Games and Live Services · 1:35

The Video Game Plague That Scientists Still Study

01:17 · Point of failure

A World of Warcraft boss attack escaped its dungeon through pets that preserved its state, turned capital cities into a virtual epidemic, and gave epidemiologists an accidental experiment in how people behave when the rules break.

Editions

Incident

System
World of Warcraft's Corrupted Blood debuff and pet-state handling
Date
September–October 2005
Location
World of Warcraft (Azeroth)
Toll
Capital cities became difficult to use as low-level characters were repeatedly killed; no real-world harm occurred.
Topics
games · state management · boundary crossing · emergent behavior · human factors

Point of failure

The pet system retained a temporary raid debuff while it was dismissed, then restored it in cities, so state crossed the boundary its lifecycle was meant to enforce.

Transcript

258 words · 1 min read

The contained disease

A video game accidentally created a pandemic.

A real enough one that scientists published research on it.

This is The Point of Failure, episode five.

World of Warcraft. 2005. Millions of players.

The developers released a new dungeon with a boss whose signature attack is a disease called Corrupted Blood.

It drains your health and it jumps to players standing near you.

The disease is designed to stay inside the dungeon.

The escape

One problem. Players can summon pets. And pets can catch it.

Dismiss an infected pet. Walk to the city. Summon it again.

And the plague walks out with you.

Within hours, the game's capital cities are graveyards. Skeletons carpet the streets.

The epidemic

And then the fascinating part begins. Players start behaving like people in a real epidemic.

Some flee to the countryside. Healers run towards the infected. Officials try quarantines that fail.

And some players on purpose spread it, just to watch it burn.

Real epidemiologists noticed, then published research arguing this accident revealed something models miss:

how humans actually behave when the rules break. Curiosity, panic, sacrifice, sabotage.

The untested interaction

Point of failure

One untested interaction, a pet crossing a boundary, turned a game mechanic into a global event inside a world of millions.

The bug was in the code. The chaos was in us.

Every failure has a story. Every story was preventable.

I'm Kevin. See you in the next one.

Sources

5 sources

  1. The untapped potential of virtual game worlds to shed light on real world epidemics

    The Lancet Infectious Diseases · 2007

    Eric T. Lofgren and Nina H. Fefferman's peer-reviewed analysis of the incident. It explains why virtual worlds can reveal human behavior that epidemic models struggle to represent, including noncompliance, curiosity, altruism, and malice.

  2. Virtual plague spreading like wildfire in World of Warcraft

    Ars Technica · 2005

    Contemporaneous reporting from 21 September 2005. It records Corrupted Blood spreading from Hakkar's instance into Azeroth's cities, killing lower-level characters almost instantly, and players escaping attempted quarantines.

  3. World of Warcraft Client Patch 1.8.0 (2005-10-11)

    WoWInterface · 2005

    Preserved patch notes for the permanent fix: “Fixed a bug that would allow Hakkar's Corrupted Blood ability to target pets.” It anchors the escape mechanism in the published change record.

  4. The Corrupted Blood Incident Began Sixteen Years Ago on September 15, 2005

    Wowhead · 2021

    Technical retrospective of the dismissed-pet path, asymptomatic non-player-character carriers, player responses, the failed voluntary quarantine, and the later fix that stopped pets carrying the debuff out of the instance.

  5. The researchers who once studied WoW's Corrupted Blood plague are now fighting the coronavirus

    PC Gamer · 2020

    A 2020 interview with Eric Lofgren on the enduring research value of Corrupted Blood, particularly the part human behavior and compliance play in an epidemic.

  1. 01

    The Update That Stopped the World

    On 19 July 2024, a flawed CrowdStrike content update crashed Windows machines around the world. The failure was not an attack: it was a release path that trusted a validator which had accepted the configuration it was meant to stop.

  2. 02

    $440 Million in 45 Minutes

    A rollout reached seven of Knight Capital's eight production servers. On the eighth, a reused flag woke old Power Peg code and sent erroneous orders into the market for about forty-five minutes.

  3. 03

    The Song That Broke YouTube's Math

    Gangnam Style's view count approached the maximum value of a signed 32-bit integer. YouTube widened the counter before it overflowed, a friendly example of a failure mode that is much less friendly in systems that cannot be patched in time.